The Chief Information Security Officer (CISO) provides strategic leadership for the organization's cybersecurity and information protection programs, ensuring the security of protected health information (PHI), critical systems, and sensitive data. The CISO leads enterprise risk management, regulatory compliance, security operations, incident response, and business continuity efforts while aligning security initiatives with organizational goals, patient safety, and care continuity. Through collaboration, governance, and security awareness, the CISO helps safeguard the organization against evolving threats and supports the secure delivery of healthcare services.
KNOWLEDGE/EXPERIENCE:
Education and Experience
- Minimum 2 years of progressive experience in Information Security, with at least 2 years in a senior leadership/executive role (CISO or equivalent) preferred.
- Deep and demonstrated expertise in the healthcare industry, with a strong understanding of clinical workflows, EHR systems, and the protection of PHI preferred.
Certifications (Preferred)
- Certified Information Security Manager (CISM)
- Certified Information Systems Security Professional (CISSP)
- Certified Chief Information Security Officer (CCISO)
- HITRUST CSF Practitioner (CCSFP)
Required Skills and Competencies
- Cybersecurity Technologies: Expertise with enterprise-grade security architecture, including IAM, cloud security (AWS/Azure/GCP), network segmentation, and advanced threat detection tools.
- Risk Management: Proven track record of conducting and managing enterprise risk assessments and developing effective mitigation strategies.
EDUCATION: Bachelor’s degree in Computer Science, Information Security, or a related field. Master's degree preferred.
QualificationsKNOWLEDGE/EXPERIENCE:
Education and Experience
- Minimum 2 years of progressive experience in Information Security, with at least 2 years in a senior leadership/executive role (CISO or equivalent) preferred.
- Deep and demonstrated expertise in the healthcare industry, with a strong understanding of clinical workflows, EHR systems, and the protection of PHI preferred.
Certifications (Preferred)
- Certified Information Security Manager (CISM)
- Certified Information Systems Security Professional (CISSP)
- Certified Chief Information Security Officer (CCISO)
- HITRUST CSF Practitioner (CCSFP)
Required Skills and Competencies
- Cybersecurity Technologies: Expertise with enterprise-grade security architecture, including IAM, cloud security (AWS/Azure/GCP), network segmentation, and advanced threat detection tools.
- Risk Management: Proven track record of conducting and managing enterprise risk assessments and developing effective mitigation strategies.
EDUCATION: Bachelor’s degree in Computer Science, Information Security, or a related field. Master's degree preferred.
Skills Required
- Minimum 2 years of progressive experience in Information Security
- At least 2 years in a senior leadership/executive role (CISO or equivalent)
- Deep expertise in the healthcare industry with understanding of clinical workflows and EHR systems
- Certified Information Security Manager (CISM)
- Certified Information Systems Security Professional (CISSP)
- Certified Chief Information Security Officer (CCISO)
- HITRUST CSF Practitioner (CCSFP)
- Expertise with enterprise-grade security architecture including IAM
- Cloud security experience (AWS, Azure, GCP)
- Experience with network segmentation and advanced threat detection tools (SIEM/EDR)
- Proven track record conducting and managing enterprise risk assessments and mitigation strategies
- Bachelor's degree in Computer Science, Information Security, or related field
- Master's degree
What We Do
SPH Media is a leading media group, with operations in the publishing of newspapers, magazines, and books in both print and digital editions. It also owns and operates other businesses such as radio stations and outdoor media. The mission of SPH Media is to be the trusted source of news on Singapore and Asia, to represent the communities that make up Singapore, and to connect them to the world. The businesses are held by SPH Media Trust, a public company limited by guarantee.
